Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80422ae7-d538-408d-b2b3-68ee6ae98ff6.roa
File:                     80422ae7-d538-408d-b2b3-68ee6ae98ff6.roa (raw, json)
Hash identifier:          QfJrWPY/jChUOaa8s5gGkbp/OIXKAQX6nI0ToIoQKhk=
Subject key identifier:   77:5C:27:C0:38:11:74:F3:13:43:32:9F:B8:9C:D7:DF:5F:B3:C8:DC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2D57DBB51B7958BBB5E37A671B9077E47AC81621
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80422ae7-d538-408d-b2b3-68ee6ae98ff6.roa
Signing time:             Tue 04 Aug 2026 00:20:06 +0000
ROA not before:           Tue 04 Aug 2026 00:20:06 +0000
ROA not after:            Mon 02 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        164.145.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:57:db:b5:1b:79:58:bb:b5:e3:7a:67:1b:90:77:e4:7a:c8:16:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  4 00:20:06 2026 GMT
            Not After : Nov  2 23:59:59 2026 GMT
        Subject: serialNumber=b609bc2202628275fba4e0180cc4b73309112c35edbef5a0664081a449167c2c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:17:bc:87:17:c8:7b:83:35:4f:b2:8f:b8:25:
                    dd:1b:29:10:0a:65:eb:54:05:c8:19:ae:63:41:97:
                    2b:16:79:c5:64:c7:a3:04:c4:c1:2f:f6:2f:d3:06:
                    ce:68:62:87:63:f2:8b:32:16:2e:12:bc:02:ed:ff:
                    c9:36:03:70:fd:11:9e:03:58:3f:f7:01:9c:9d:a1:
                    b5:a9:21:5f:6c:e5:bc:fb:fe:3c:f0:6b:13:c1:db:
                    46:cd:ff:37:e3:1b:f4:f0:3a:4a:c9:0b:79:5d:8b:
                    4d:a8:8c:29:23:ed:20:51:42:b0:04:09:f8:84:19:
                    49:71:91:1c:28:66:50:d0:1e:ac:1f:0a:e1:10:05:
                    de:ca:9a:ee:65:dc:95:1c:dd:cb:ba:a2:05:36:53:
                    fe:61:4f:6f:cf:ff:79:47:aa:4e:c9:0d:15:ec:8a:
                    29:ba:36:2a:98:73:e1:20:4a:82:5d:47:c1:39:fb:
                    9c:8d:07:fc:31:42:33:35:a1:46:fe:fc:0a:6e:be:
                    59:14:8c:f5:32:5c:44:36:32:11:e6:70:8d:9a:b5:
                    62:e0:db:73:ff:69:d9:11:a4:e2:94:83:59:4f:8c:
                    db:92:80:a2:c6:ef:d6:44:73:67:40:5c:15:d1:ce:
                    c6:57:f3:d6:0d:92:73:99:8b:43:02:ee:4b:fb:25:
                    7d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:5C:27:C0:38:11:74:F3:13:43:32:9F:B8:9C:D7:DF:5F:B3:C8:DC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80422ae7-d538-408d-b2b3-68ee6ae98ff6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.145.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ae:a3:e0:5f:ce:ce:85:1f:db:7b:df:43:6b:47:16:9b:35:8b:
         7b:ab:5f:f3:0f:cf:24:bc:1f:cf:29:18:f2:8b:e6:b9:f0:ed:
         db:51:26:bd:be:54:c9:fc:ad:0b:c0:a6:b8:2a:b0:a7:b7:b9:
         89:78:38:bd:e2:fd:66:f4:8d:d5:b7:2c:a1:a5:19:13:42:5e:
         c5:4f:61:99:1a:ee:c2:62:c6:5b:36:b5:a8:21:52:c9:67:93:
         45:ed:d5:5c:bc:73:ea:ea:08:23:83:39:e7:c2:c5:b3:d9:80:
         98:a2:dc:b8:5d:50:24:c4:51:8b:ae:e1:a2:b2:bb:15:97:ad:
         1b:a3:bd:21:be:37:57:10:c8:c5:d8:85:8c:24:85:0a:4c:9c:
         eb:a4:de:3e:70:6a:64:76:7a:c2:f7:c7:18:2f:c5:ed:a8:14:
         cc:42:16:dc:54:3b:cd:0e:76:c6:79:a1:1c:8c:93:ac:eb:01:
         07:08:9b:bf:db:50:f4:1b:7a:55:f8:c7:67:a7:c0:58:5e:2d:
         7a:98:43:16:ac:2a:0f:2a:db:da:8c:6b:9b:16:7b:06:b1:bb:
         83:2f:82:a7:e6:42:01:54:1c:bf:89:09:6e:93:6b:d7:04:f5:
         39:47:37:9b:96:9f:3e:2b:74:2d:71:e6:02:c7:c7:32:9c:e1:
         5c:f1:be:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 13:22:24 2026 by rpki-client